Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/H-kMCGcNQ-7SmDD1sHct8AdbiPo.roa
File:                     H-kMCGcNQ-7SmDD1sHct8AdbiPo.roa (raw, json)
Hash identifier:          SEalyAWsVyAiErEXqZQJp/EkR6tL48dQTta/XgPV56o=
Subject key identifier:   1F:E9:0C:08:67:0D:43:EE:D2:98:30:F5:B0:77:2D:F0:07:5B:88:FA
Certificate issuer:       /CN=5b25909f3b94e55f5ef336a27d274a7dfd0d96b2
Certificate serial:       01856BDC5EF2CAC018064EBA227E6F163958
Authority key identifier: 5B:25:90:9F:3B:94:E5:5F:5E:F3:36:A2:7D:27:4A:7D:FD:0D:96:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/H-kMCGcNQ-7SmDD1sHct8AdbiPo.roa
Signing time:             Sun 01 Jan 2023 05:44:42 +0000
ROA not before:           Sun 01 Jan 2023 05:44:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41400
IP address blocks:        185.98.200.0/22 maxlen: 22
                          2a04:c00::/29 maxlen: 29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:dc:5e:f2:ca:c0:18:06:4e:ba:22:7e:6f:16:39:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b25909f3b94e55f5ef336a27d274a7dfd0d96b2
        Validity
            Not Before: Jan  1 05:44:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1fe90c08670d43eed29830f5b0772df0075b88fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e9:43:cd:93:af:91:bc:6a:d9:1f:26:cd:b7:
                    02:3a:92:a4:23:34:41:e6:fa:81:86:5b:f3:a2:a8:
                    57:22:64:03:33:44:76:25:a4:60:7d:06:f1:05:97:
                    29:10:a8:07:10:7a:ce:46:37:fb:64:3b:d2:11:c7:
                    a0:40:52:f5:a3:4e:13:2c:de:b0:4c:b2:7d:16:82:
                    37:3c:88:04:91:86:06:f2:0f:b0:bd:a9:12:52:96:
                    3d:ae:d1:db:2f:bf:03:30:0f:14:1d:a4:48:12:80:
                    e6:e6:d9:d4:ee:4c:46:17:d5:75:85:f7:41:8a:1f:
                    2b:d3:3b:38:dd:ba:d3:86:92:4f:4d:64:ef:11:b6:
                    38:cd:32:14:0c:b9:05:00:7e:d9:90:68:84:79:76:
                    77:4e:5a:d4:b1:4a:83:49:2b:2d:bf:57:58:3f:e1:
                    14:f8:7e:4d:ab:2d:00:68:ef:48:b8:8c:e6:d3:6e:
                    67:c2:c8:27:cc:d4:4a:b5:28:2b:a9:d3:ec:33:ee:
                    0f:16:03:e8:e7:c2:8a:c1:96:52:fc:9a:fd:2b:a7:
                    0c:f2:b0:6f:e8:c6:92:01:fb:07:b7:2f:86:3f:22:
                    de:25:ad:69:a9:85:6f:f4:cf:4f:f2:78:4f:6e:c2:
                    41:a5:c5:70:5a:16:15:25:7a:82:8a:3c:da:82:f3:
                    da:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E9:0C:08:67:0D:43:EE:D2:98:30:F5:B0:77:2D:F0:07:5B:88:FA
            X509v3 Authority Key Identifier:
                keyid:5B:25:90:9F:3B:94:E5:5F:5E:F3:36:A2:7D:27:4A:7D:FD:0D:96:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/H-kMCGcNQ-7SmDD1sHct8AdbiPo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.98.200.0/22
                IPv6:
                  2a04:c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         26:89:ee:63:0e:b7:57:4f:5e:97:a2:62:83:87:b3:41:9f:fc:
         a1:93:2c:34:c2:f4:8e:d0:3c:c0:43:e6:d7:69:67:5f:4f:50:
         bd:76:09:8f:c9:00:18:fc:32:01:2a:b9:91:1a:a1:74:54:82:
         b3:5e:5c:c4:a6:0c:de:a1:9e:8a:d5:d8:c8:a5:ce:7a:ca:0b:
         74:e1:8a:e5:ac:50:1f:76:74:80:01:b2:e0:52:b1:cf:b1:02:
         33:af:89:74:18:65:8b:31:f2:61:74:13:a5:74:c1:ad:1e:69:
         b4:f1:1c:cc:60:b6:7f:52:f6:e9:78:8e:a9:d6:8b:69:4f:6a:
         1d:f4:7e:29:fa:4b:4d:0f:04:a7:4b:7e:8b:1e:67:70:21:66:
         55:d9:85:d0:1b:7d:a1:b9:83:83:43:82:ef:a5:83:59:69:67:
         fb:06:60:08:a6:bc:f8:60:59:39:ff:f2:57:cd:ee:f9:c1:ef:
         7c:80:92:cc:2c:6c:90:67:46:86:2a:87:b4:2a:d3:ae:27:77:
         b9:19:69:64:6b:ef:3b:8b:7d:c4:fb:a4:7e:2e:dc:aa:7c:87:
         c8:36:c6:9b:72:fe:6c:95:9c:bf:2e:8b:cc:c0:22:15:a7:1a:
         cd:8a:07:33:aa:13:3f:28:49:6c:99:83:63:07:17:2d:c1:9f:
         d3:c4:79:ba
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVr3F7yysAYBk66In5vFjlYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMjU5MDlmM2I5NGU1NWY1ZWYzMzZhMjdkMjc0YTdkZmQw
ZDk2YjIwHhcNMjMwMTAxMDU0NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmU5MGMwODY3MGQ0M2VlZDI5ODMwZjViMDc3MmRmMDA3NWI4OGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6elDzZOvkbxq2R8mzbcCOpKkIzRB
5vqBhlvzoqhXImQDM0R2JaRgfQbxBZcpEKgHEHrORjf7ZDvSEcegQFL1o04TLN6w
TLJ9FoI3PIgEkYYG8g+wvakSUpY9rtHbL78DMA8UHaRIEoDm5tnU7kxGF9V1hfdB
ih8r0zs43brThpJPTWTvEbY4zTIUDLkFAH7ZkGiEeXZ3TlrUsUqDSSstv1dYP+EU
+H5Nqy0AaO9IuIzm025nwsgnzNRKtSgrqdPsM+4PFgPo58KKwZZS/Jr9K6cM8rBv
6MaSAfsHty+GPyLeJa1pqYVv9M9P8nhPbsJBpcVwWhYVJXqCijzagvPaPwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFB/pDAhnDUPu0pgw9bB3LfAHW4j6MB8GA1UdIwQY
MBaAFFslkJ87lOVfXvM2on0nSn39DZayMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3lXUW56dVU1VjllOHphaWZTZEtmZjBObHJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lMWIyMGYtNGQ2ZC00MGUwLWFmOGEt
M2YxN2NiY2JhNWNhLzEvSC1rTUNHY05RLTdTbUREMXNIY3Q4QWRiaVBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9lMWIyMGYtNGQ2ZC00MGUwLWFmOGEtM2YxN2NiY2JhNWNh
LzEvV3lXUW56dVU1VjllOHphaWZTZEtmZjBObHJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWLIMA0E
AgACMAcDBQMqBAwAMA0GCSqGSIb3DQEBCwUAA4IBAQAmie5jDrdXT16XomKDh7NB
n/yhkyw0wvSO0DzAQ+bXaWdfT1C9dgmPyQAY/DIBKrmRGqF0VIKzXlzEpgzeoZ6K
1djIpc56ygt04YrlrFAfdnSAAbLgUrHPsQIzr4l0GGWLMfJhdBOldMGtHmm08RzM
YLZ/UvbpeI6p1otpT2od9H4p+ktNDwSnS36LHmdwIWZV2YXQG32huYODQ4LvpYNZ
aWf7BmAIprz4YFk5//JXze75we98gJLMLGyQZ0aGKoe0KtOuJ3e5GWlka+87i33E
+6R+LtyqfIfINsabcv5slZy/LovMwCIVpxrNigczqhM/KElsmYNjBxctwZ/TxHm6
-----END CERTIFICATE-----